CertMate
Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure
Platform availability
Available on 1 of 6 install platforms
- Unraid (not listed)
- TrueNAS (not listed)
- Umbrel (not listed)
- ZimaOS (not listed)
- Proxmox
- Helm (not listed)
Also on GitHub
Health score
68/100 Good
- Maintained
- 100last commit 2 days ago
- Popular
- 631,448 GitHub stars
- Easy to install
- 101 install platform
- Light to run
- No data
Based on 3 of 4 factors.
How is this calculated?
A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). Factors without data are left out and the rest are rescaled.
Availability: platform listings confirmed today
- GitHub stars
- 1,448
- Open issues
- 26
- Last commit
- 2026-10-08
- Latest release
- v2.48.5
- License
- MIT
- Activity
- rising
Checked today - source: GitHub (fabriziosalmi/certmate)
Resources & Compatibility
Requirements not published yet.
First-install notes
- Installation Use the official CertMate documentation for Docker installation, DNS provider and CA setup, deploy hooks, backups, and troubleshooting. source
Fetched today - each note links to its source
Variants
Alternatives
No alternatives collected yet.
Common questions
Can CertMate run without Docker?
Yes. The documentation provides a Docker Compose quick start and a systemd service option without Docker.
How do I issue certificates for a DNS zone that CertMate cannot write?
You can delegate the _acme-challenge CNAME into a zone that CertMate can write, or use a custom script DNS provider that creates the TXT record.
How are CertMate backups handled?
Backups use a passphrase, support retention, and can be restored through the UI or API.
Why does CertMate refuse to start with a writable-directory error?
It will not start unless the certificate, data, backup, and log directories are writable. A bind mount that preserves the host directory's ownership is the usual cause.
Can CertMate use single sign-on?
Yes, CertMate supports OIDC/SSO.
Answers sourced from www.certmate.org, www.certmate.org, www.certmate.org
Community
- CompTIA Certification Forums | CertForums (forum)
- Am I the only one that thinks the certmaster labs suck? (reddit)
- PASSED CERTMASTER CE FOR SECURITY+ : r/CompTIA - Reddit (reddit)
Collected today - public community threads